Running the latest CVS version of NTop on RedHat Enterprise Server 3
with all current updates applied.
Configured via:
./configure --prefix=/usr/local/ntop --without-ssl
(I'm using Apache to provide the SSL)
I did get a small warning about not finding sctp during compilation, but
none of the nice big boxes...only xmldump not able to be made there (I
can't find any gdome.h downloadable, but no big worry)
Not sure where I'd get sctp from (quick Google didn't show up any
downloadables).
Am trying to run the NetFlow plugin to capture from remote probes, but
whenever I configure an interface for this, it SegFaults.
I checked the lists & see that others have also had this problem, so I
read through the recommended debugging (at the bottom of the excellent
docs/FAQ which misses just 1 gdb command: 'run')
Thu Mar 2 11:29:16 2006 [MSGID0301309] [t66460592 netflowPlugin:3000]
NETFLOW: knownDevices=2
Thu Mar 2 11:29:16 2006 [MSGID0100239] [t66460592 netflowPlugin:2673]
NETFLOW: createNetFlowDevice(2)
Thu Mar 2 11:29:16 2006 [MSGID8717032] [t66460592 initialize:1877]
Creating dummy interface, 'NetFlow-device.2'
Thu Mar 2 11:29:16 2006 [MSGID9195289] [t66460592 netflowPlugin:1560]
NETFLOW: initializing deviceId=1
Thu Mar 2 11:29:16 2006 [MSGID0848671] [t66460592 netflowPlugin:1610]
NETFLOW: White list initialized to ''
Thu Mar 2 11:29:16 2006 [MSGID0848671] [t66460592 netflowPlugin:1628]
NETFLOW: Black list initialized to ''
Thu Mar 2 11:29:16 2006 [MSGID8727919] [t66460592 netflowPlugin:250]
NETFLOW: Created a UDP socket (19)
Thu Mar 2 11:29:16 2006 [MSGID0045729] [t66460592 netflowPlugin:293]
NETFLOW: Collector listening on port 2055
...
Program received signal SIGSEGV, Segmentation fault.
So I guess that Thread 66460592 is the one to do the 'bt full' on...
(gdb) info threads
6 Thread 66460592 (LWP 830) 0x008986e1 in __nptl_create_event () from
/lib/tls/libpthread.so.0
(gdb) thread 6
[Switching to thread 6 (Thread 66460592 (LWP 830))]#0 0x008986e1 in
__nptl_create_event () from /lib/tls/libpthread.so.0
(gdb) info stack
#0 0x008986e1 in __nptl_create_event () from /lib/tls/libpthread.so.0
#1 0x0089962f in create_thread () from /lib/tls/libpthread.so.0
#2 0x00898f9d in pthread_create@@GLIBC_2.1 () from
/lib/tls/libpthread.so.0
#3 0x00145342 in createThread (threadId=0x9b14b00,
__start_routine=0x8f968c <netflowMainLoop>,
userParm=0x1 <Address 0x1 out of bounds>) at util.c:1673
#4 0x008f6e31 in setNetFlowInSocket (deviceId=1) at netflowPlugin.c:300
#5 0x008fa17c in initNetFlowDevice (deviceId=1) at netflowPlugin.c:1655
#6 0x008fc565 in createNetFlowDevice (netFlowDeviceId=2) at
netflowPlugin.c:2692
#7 0x008fcba3 in handleNetflowHTTPrequest (_url=0x3f5ffa0 "") at
netflowPlugin.c:3004
#8 0x00a22dd4 in handlePluginHTTPRequest (url=0x3f61589
"NetFlow?device") at webInterface.c:9131
#9 0x009e831e in returnHTTPPage (pageName=0x3f61581
"plugins/NetFlow?device", postLen=-1, from=0x3f617a0,
httpRequestedAt=0x3f61028, usedFork=0x3f6101c,
agent=0x3f61440 "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1",
referer=0x3f61340 "https://ntop.domain.org/plugins/NetFlow",
requestedLanguage=0x3f61230, numLang=0, isPostMethod=0)
at http.c:2248
#10 0x009ec3cc in handleHTTPrequest (from=
{hostFamily = 2, addr = {_hostIp4Address = {s_addr =
2130706433}, _hostIp6Address = {in6_u = {u6_addr8 =
"\001\000\000\177\205\000\000\000\0042\234\000<\034?, u6_addr16 = {1,
32512, 133, 0, 12804, 156, 7228, 204}, u6_addr32 = {2130706433, 133,
10236420, 13376572}}}}}) at http.c:3689
#11 0x00a22c2b in handleSingleWebConnection (fdmask=0x3f617e4) at
webInterface.c:9083
#12 0x00a22a44 in handleWebConnections (notUsed=0x0) at webInterface.c:8935
#13 0x00898dd8 in start_thread () from /lib/tls/libpthread.so.0
#14 0x00d98d1a in clone () from /lib/tls/libc.so.6
(gdb) bt full
#0 0x008986e1 in __nptl_create_event () from /lib/tls/libpthread.so.0
No symbol table info available.
#1 0x0089962f in create_thread () from /lib/tls/libpthread.so.0
No symbol table info available.
#2 0x00898f9d in pthread_create@@GLIBC_2.1 () from
/lib/tls/libpthread.so.0
No symbol table info available.
#3 0x00145342 in createThread (threadId=0x9b14b00,
__start_routine=0x8f968c <netflowMainLoop>,
userParm=0x1 <Address 0x1 out of bounds>) at util.c:1673
rc = 111111088
#4 0x008f6e31 in setNetFlowInSocket (deviceId=1) at netflowPlugin.c:300
sockIn = {sin_family = 2, sin_port = 1800, sin_addr = {s_addr =
0}, sin_zero = "\016\000\000\000°Z\215\t"}
sockopt = 1
#5 0x008fa17c in initNetFlowDevice (deviceId=1) at netflowPlugin.c:1655
a = 10
b = 128
c = 0
d = 0
a1 = 255
b1 = 255
c1 = 0
d1 = 0
rc = 0
value = "./netflow-dump", '\0' <repeats 1009 times>
workList = '\0' <repeats 1023 times>
#6 0x008fc565 in createNetFlowDevice (netFlowDeviceId=2) at
netflowPlugin.c:2692
deviceId = 1
buf = "NetFlow-device.2\000
value =
"k?17\000\220?\000\000\000\000\000Pµ\025\000\000\000\000\000\002\000\000\000
#7 0x008fcba3 in handleNetflowHTTPrequest (_url=0x3f5ffa0 "") at
netflowPlugin.c:3004
value = '\0' <repeats 127 times>
workList = '\0' <repeats 48 times>, "<TD
ALIGN=RIGHT>0</TD>\000TD ALIGN=RIGHT>0</TD><TD
ALIGN=RIGHT>0</TD><TD\000\000\000\000IGN=RIGHT>0</TD>\000=\"left\" ns
\000\000\000\000
url = 0x0
deviceId = 2
originalId = 0
#8 0x00a22dd4 in handlePluginHTTPRequest (url=0x3f61589
"NetFlow?device") at webInterface.c:9131
arg = 0x8 <Address 0x8 out of bounds>
flows = (FlowFilterList *) 0x8
#9 0x009e831e in returnHTTPPage (pageName=0x3f61581
"plugins/NetFlow?device", postLen=-1, from=0x3f617a0,
httpRequestedAt=0x3f61028, usedFork=0x3f6101c,
agent=0x3f61440 "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1",
referer=0x3f61340 "https://ntop.domain.org/plugins/NetFlow",
requestedLanguage=0x3f61230, numLang=0, isPostMethod=0)
at http.c:2248
pageURI = 0x0
sortedColumn = 0
printTrailer = 1
idx = 0
errorCode = 0
pageNum = 0
portNr = 0
statbuf = {st_dev = 0, __pad1 = 0, st_ino = 14624192, st_mode =
14621912, st_nlink = 14624192, st_uid = 162195752,
st_gid = 66457464, st_rdev = 62810426384241272, __pad2 = 59688,
st_size = 1422672, st_blksize = 0, st_blocks = 162195769,
st_atim = {tv_sec = 66457496, tv_nsec = 1211657}, st_mtim = {tv_sec =
162195752, tv_nsec = 0}, st_ctim = {tv_sec = 1422672,
tv_nsec = 1428052}, __unused4 = 66457496, __unused5 = 9022240}
fd = (FILE *) 0x0
tmpStr = "/usr/local/ntop/share/ntop/html/plugins/NetFlow\000\214\r
domainNameParm = 0x0
minus = 0x0
db_key = 0x0
db_val = 0x0
revertOrder = 0
vlanId = 65535
ifId = 65535
t = {tm_sec = 33152, tm_min = 1, tm_hour = 14621912, tm_mday =
66456940, tm_mon = 66456904, tm_year = 13806021,
tm_wday = 66456940, tm_yday = 66457280, tm_isdst = 808727602,
tm_gmtoff = 0, tm_zone = 0xd0039f "\201ù\031\017"}
showHostsMode = showAllHosts
showLocalityMode = showSentReceived
showFcHostsPage = 0
showPrefPage = 1
vsanId = 0
rc = 0
i = 0
showBytes = 1
#10 0x009ec3cc in handleHTTPrequest (from=
{hostFamily = 2, addr = {_hostIp4Address = {s_addr =
2130706433}, _hostIp6Address = {in6_u = {u6_addr8 =
"\001\000\000\177\205\000\000\000\0042\234\000<\034?, u6_addr16 = {1,
32512, 133, 0, 12804, 156, 7228, 204}, u6_addr32 = {2130706433, 133,
10236420, 13376572}}}}}) at http.c:3689
rc = 0
i = 3
skipLeading = 0
postLen = -1
usedFork = 0
requestedURL = "/plugins/NetFlow?device\0000", '\0' <repeats 486
times>
pw = '\0' <repeats 63 times>
agent = "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1", '\0' <repeats 165 times>
referer = "https://ntop.domain.org/plugins/NetFlow", '\0'
<repeats 209 times>
workLanguage = '\0' <repeats 255 times>
requestedURLCopy = 0x0
httpRequestedAt = {tv_sec = 1141298956, tv_usec = 783564}
gzipBytesSent = 0
requestedLanguage = {0x0, 0x0, 0x0, 0x0}
tmpStr = '\0' <repeats 511 times>
isPostMethod = 0
#11 0x00a22c2b in handleSingleWebConnection (fdmask=0x3f617e4) at
webInterface.c:9083
from = {sa_family = 2, sa_data =
"¡?177\000\000\001\000\000\000\000\000\000\000"}
remote_ipaddr = {hostFamily = 2, addr = {_hostIp4Address =
{s_addr = 16777343}, _hostIp6Address = {in6_u = {
u6_addr8 = "\177\000\000\001\205\000\000\000\0042\234\000<\034?,
u6_addr16 = {127, 256, 133, 0, 12804, 156, 7228, 204},
u6_addr32 = {16777343, 133, 10236420, 13376572}}}}}
from_len = 16
#12 0x00a22a44 in handleWebConnections (notUsed=0x0) at webInterface.c:8935
wait_time = {tv_sec = 8, tv_usec = 650000}
rc = 0
mask = {__fds_bits = {16384, 0 <repeats 31 times>}}
mask_copy = {__fds_bits = {16384, 0 <repeats 31 times>}}
topSock = 14
#13 0x00898dd8 in start_thread () from /lib/tls/libpthread.so.0
No symbol table info available.
#14 0x00d98d1a in clone () from /lib/tls/libc.so.6
No symbol table info available.
-END-
I have sanitised the name of the domain.
F